ICE awards contested, controversial surveillance contract to Thomson Reuters

Overview

ICE has awarded a $125 million surveillance contract to Thomson Reuters Special Services to monitor up to 1 million individuals and identify potentially criminal behavior before it occurs. The award continues and expands DHS (Department of Homeland Security) surveillance capabilities that began at least six years ago with CACI and gives contractor access to proprietary data, social media, geolocation, and deep web sources. The procurement was controversial: it was initially announced as sole‑source, reopened to competition, and ultimately received only one bid, raising transparency and civil‑liberties concerns for companies in the surveillance technology and data‑analytics market. Contractors that supply surveillance tools, OSINT, biometric services, geospatial or predictive analytics should expect increased scrutiny, potential reputational risk, and tighter compliance expectations from DHS components including ICE. Action is needed now to assess legal/privacy exposure, validate current compliance with named control frameworks, and position teams and partners for any follow‑on solicitations or agency briefings.

Immediate Actions (This Week)

• [ ] Convene an internal briefing (contracts, legal, compliance, capture) to review the award facts and clarify company posture on participation in surveillance‑related programs.
• [ ] Map your capabilities to the affected market segments (Surveillance Technology, Data Analytics, Intelligence Services, Biometric Services, Social Media Monitoring, Geospatial Intelligence, Predictive Analytics, OSINT, Dark Web Monitoring) and identify reputational or policy risk areas.
• [ ] Inventory data sources, data handling pathways, and third‑party data providers that would be used for similar work (proprietary datasets, social media, geolocation, dark/deep web) and flag any contractual or legal restrictions.
• [ ] Initiate a legal/privacy risk assessment focusing on civil‑liberties exposure and obligations under the Privacy Act and other named policies.
• [ ] Reach out to current and potential teaming partners/subcontractors to gauge interest and capability gaps for surveillance and analytics work.

Short-Term Actions (30 Days)

• [ ] Develop a prioritized remediation and evidence plan for the named compliance surfaces (NIST 800-171 (NIST Special Publication 800-171), FedRAMP (Federal Risk and Authorization Management Program), FISMA, Privacy Act, DHS Sensitive Systems Policy Directive 4300A) — identify gaps, owners, and timelines.
• [ ] Prepare a draft privacy/data protection plan and a public communications posture addressing how your company handles sensitive personal data and mitigates civil‑liberties risk.

Long-Term Actions (90+ Days)

• [ ] Execute remediation workstreams required by the compliance plan (technical, policy, and organizational), and prepare audit‑ready artifacts for assessments or authorization processes.
• [ ] Build a formal capture plan targeting appropriate contract vehicles listed in market intelligence and the agency workflows relevant to DHS components (e.g., planning for participation on vehicles noted in market signals), including teaming agreements, past performance writeups, and bid/no‑bid criteria tied to reputational risk.

Compliance Checklist

• [ ] NIST 800-171 — assess implementation of required controls for protecting Controlled Unclassified Information (CUI (Controlled Unclassified Information)) in relevant systems and produce a remediation plan.
• [ ] FedRAMP — identify whether cloud services in scope require FedRAMP authorization and document authorization pathway or plan.
• [ ] Privacy Act — review obligations for handling personally identifiable information and prepare policy updates and training as needed.
• [ ] FISMA — confirm applicable system security and reporting obligations for federal information systems.
• [ ] DHS Sensitive Systems Policy Directive 4300A — map agency‑level sensitive systems requirements into your security and authorization plan.

Compliance scope TBD — re‑evaluate when official guidance or solicitation language is published.

Resources

• NIST SP 800-171 (NIST Special Publication 800-171) (requirements text): https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171r2.pdf
• FedRAMP program site: https://www.fedramp.gov/
• Privacy Act (overview / statutory text): https://www.justice.gov/opcl/privacy-act-1974
• FISMA guidance (CISA): https://www.cisa.gov/federal-information-security-modernization-act-fisma
• DHS Sensitive Systems Policy Directive 4300A (DHS policy): https://www.dhs.gov/publication/dhs-sensitive-systems-policy-directive-4300a
• Agency pages:
• DHS: https://www.dhs.gov/
• ICE: https://www.ice.gov/
• CBP: https://www.cbp.gov/
• Primary hub: Winning Federal Contracts Guide (/insights/winning-federal-contracts)
• Related guides: CMMC (Cybersecurity Maturity Model Certification) Compliance Guide (/insights/cmmc-compliance-guide) · CUI-Safe CRM Guide (/insights/cui-safe-crm-guide)

How Cabrillo Club Automates This

Cabrillo Signals War Room — Already detected this event and delivered this briefing within minutes. For subscribers, War Room continuously monitors federal sources, policy notices, and procurement announcements so you are alerted instantly when awards, reopens, or contentious contract actions occur. It pushes contextual briefings to your team, flags public controversy indicators, and centralizes media and policy references for rapid executive and legal review.

Cabrillo Signals Match Engine — When an event like this shifts the competitive landscape, the Match Engine automatically rescors your opportunity pipeline. It updates match scores and keyword relevance for opportunities and pursuits tied to Surveillance Technology, Data Analytics, and the other affected market segments, so capture managers immediately see which active pursuits move up or down in priority.

Cabrillo Signals Intelligence Hub — The Intelligence Hub tracks affected agencies, NAICS tags, and contract vehicles associated with the event and lets you create saved searches and alerts for follow‑on solicitations and agency notices. Configure a saved search for DHS/ICE/CBP activity and the listed market segments so you receive notification when solicitations, amendments, or sources‑sought relevant to this profile appear.

Proposal Studio (Proposal OS) — Proposal Studio generates compliance matrices, draft technical approaches, and win themes tailored to sensitive analytics and surveillance work using your historical past performance. It helps produce first‑draft responses and evidence libraries for the named compliance surfaces and supports fast iterations for bid/no‑bid decisions driven by this event.

Proposal Studio Workflow Tracker — The Workflow Tracker runs your 9‑gate capture process end‑to‑end, automatically routing legal and compliance reviews for sensitive data handling, tracking supplier and partner certifications, and assembling audit‑ready documentation packages needed for security or privacy assessments tied to these solicitations.

Explore these features in your Cabrillo Club console to convert this market change into an informed capture strategy and documented compliance posture.